Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6bc0795c-d6e7-4f78-9afc-44408d363ccb.roa
File:                     6bc0795c-d6e7-4f78-9afc-44408d363ccb.roa (raw, json)
Hash identifier:          qO1gqkckJseOmSXQ2yJ1QLTLr+DLThBXqJTdCzIUVTA=
Subject key identifier:   EF:43:FB:78:7E:CC:0F:65:8B:F3:71:78:51:0A:86:BF:2C:BF:0D:63
Certificate issuer:       /CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
Certificate serial:       01375DB7A29817CF32EF56067A619C243D743F2F
Authority key identifier: 91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6bc0795c-d6e7-4f78-9afc-44408d363ccb.roa
Signing time:             Thu 27 Apr 2023 00:00:00 +0000
ROA not before:           Thu 27 Apr 2023 00:00:00 +0000
ROA not after:            Sun 30 Apr 2023 23:59:59 +0000
asID:                     400098
IP address blocks:        199.36.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:37:5d:b7:a2:98:17:cf:32:ef:56:06:7a:61:9c:24:3d:74:3f:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611
        Validity
            Not Before: Apr 27 00:00:00 2023 GMT
            Not After : Apr 30 23:59:59 2023 GMT
        Subject: serialNumber=6f1b30545b24e345729ad2859a59d78d3daffc88a45796e9b90fcd4a10b6bd5f, CN=6ae4e567-6348-4c4f-98a8-0422c4c52ff3, OU=Amazon RPKI, O=Amazon.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d3:84:94:70:9b:80:6a:36:e3:8c:af:9f:12:
                    44:28:53:a0:ed:fb:30:a0:94:23:d4:8a:4b:28:ad:
                    6c:14:12:86:3b:c6:3c:ec:87:10:c6:b8:fd:d9:9e:
                    7e:52:dc:a0:d9:89:0e:10:49:ca:c7:10:d3:92:31:
                    77:81:46:43:fb:ef:e9:30:52:97:4f:b6:66:16:44:
                    56:9f:8c:e5:00:9e:0e:9c:eb:18:06:a4:c0:6f:db:
                    8d:b3:9e:41:9d:f3:ea:1b:05:97:71:9f:fa:8d:8e:
                    99:ba:7e:a6:63:49:e1:15:f7:69:8e:cf:3e:13:55:
                    1e:ed:e8:72:5d:bc:a0:98:4b:48:db:91:9f:da:1b:
                    00:f6:c4:df:9c:f3:48:5f:ce:2c:6e:8a:b5:6b:83:
                    ad:9f:64:25:2e:3a:01:ef:94:db:51:eb:96:0c:73:
                    c9:39:dd:a7:9a:e6:2b:2c:4a:85:b3:a2:b5:fd:d2:
                    03:0d:08:88:05:be:61:69:05:3f:73:06:84:c2:0a:
                    22:97:81:0c:f1:58:97:e9:42:d8:e3:71:12:1c:06:
                    c1:79:80:d3:39:65:99:af:94:0a:55:0c:da:2d:88:
                    56:2c:21:df:76:76:0f:66:76:39:e6:58:e8:dc:b6:
                    63:bb:1f:8b:16:cf:46:80:a2:0b:de:bc:ff:4b:82:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:43:FB:78:7E:CC:0F:65:8B:F3:71:78:51:0A:86:BF:2C:BF:0D:63
            X509v3 Authority Key Identifier:
                keyid:91:44:ED:C7:A4:0E:E9:90:B7:FA:36:6F:F6:E1:7D:79:AD:C4:83:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73f21c2b-8823-4c24-b25b-43c80cb6d1bb/278aab878f2831bb1823b58794b092d86fb1d7a0f74e281611.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/6bc0795c-d6e7-4f78-9afc-44408d363ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b68a32ee-455d-483a-943d-1a5be748bfea/4bb8ae5c-124c-42f3-87fb-4f34e74e3da2.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.36.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:43:f6:ca:d6:f1:4d:6c:93:ee:01:39:aa:41:ab:93:c0:4e:
         f1:d2:09:c3:8f:06:8d:17:c2:49:7e:7e:06:b9:1e:1a:34:b1:
         de:45:b8:c7:9d:28:f9:d6:fd:fe:6c:44:44:c0:6c:e3:92:dc:
         04:46:94:cb:70:96:d1:e7:32:5e:14:eb:4d:38:fe:30:d0:cf:
         ba:b8:4f:d3:68:5e:0e:d2:98:92:c3:d5:56:f9:ba:73:9d:a3:
         12:7d:fd:1d:36:6f:3d:0b:50:4c:db:44:9b:71:d0:20:43:40:
         41:cb:ed:b7:e7:3d:59:35:c6:d9:aa:86:fa:11:c7:dc:84:80:
         da:fb:a2:58:9c:1c:de:2e:ae:1a:b9:71:9b:11:55:9a:ba:59:
         a8:c1:86:92:1c:7e:6c:50:2b:1b:40:61:c3:2c:fb:96:7f:e4:
         f6:17:01:8a:13:28:8c:e7:11:a7:08:e0:48:32:5a:d4:2e:bf:
         1e:d0:e0:c5:1b:4f:76:63:5b:c2:cd:c8:a3:1c:7a:b4:fe:52:
         28:9c:71:7e:73:c2:01:ea:c8:18:ff:e3:c4:1b:6e:a3:5a:a7:
         f6:f5:38:08:ad:30:7f:bc:79:85:ce:f3:14:9c:7f:2f:4c:3e:
         26:4a:a2:f5:8e:0b:1b:0f:6b:d4:32:ea:6d:e9:55:26:d3:63:
         bb:04:4b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----